I also had to add port 443 for secure banking page and 465 for T-bird outgoing SMTP. I'm sure I'll need to add more as they come up.